CVE-1999-0757

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Mar 12, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-07585.0Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appending a %20 to the scriptCVE-1999-075910.0Buffer overflow in FuseMAIL POP service via long USER and PASS commands.CVE-1999-076010.0Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges.CVE-1999-07617.2Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program.CVE-1999-07622.6When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" protocol to gain access CVE-1999-07636.4NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network.CVE-1999-07646.4NetBSD allows ARP packets to overwrite static ARP entries.CVE-1999-076510.0SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor.CVE-1999-07669.3The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment.CVE-1999-07677.2Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable.CVE-1999-07687.5Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable.CVE-1999-07697.2Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable.